{"vulnerability": "CVE-2026-87491", "sightings": [{"uuid": "9d9df07f-b801-4a52-9803-e415e08c1514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2b57rson2t", "content": "Google patched a Chrome zero-day, CVE-2026-87491, exploited in the wild. Chrome 153 fixes 230 flaws including critical WebGL bugs. Update now.\n\n#Chrome #ZeroDay #Google #CyberSecurity #CVE #V8 #BrowserSecurity #Infosec", "creation_timestamp": "2026-09-09T00:17:22.245186Z"}, {"uuid": "4137000c-0fef-4c7f-99d6-b54cccbf4778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv2c2kmmg25i", "content": "\u30bc\u30ed\u30c7\u30a4\u3042\u308a > \"Google is aware that an exploit for CVE-2026-87491 exists in the wild.\"", "creation_timestamp": "2026-09-09T00:34:06.604349Z"}, {"uuid": "d19f999c-150a-4207-abd3-477537c52916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2dtu3cuo2r", "content": "Chrome Bleeds Again. Everyone Pretends Browser Patches Are Optional\nPANIC 78% | Lag 0.0h | Google has patched a Chrome zero-day, CVE-2026-87491, reportedly exploited in the wild. Chrome 153 a\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-09T01:05:50.532569Z"}, {"uuid": "ce503a97-e3d2-4124-b200-994d2f30107d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv33kdt7uc2s", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/09/g...\n\n#Chrome #exploit #cybersecurity", "creation_timestamp": "2026-09-09T08:10:02.736745Z"}, {"uuid": "8dc0b0d0-2377-4778-900e-c9fee246cbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv34dcutfk2k", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\nwww.helpnetsecurity.com/2026/09/09/g...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-09T08:23:59.524970Z"}, {"uuid": "84276845-55b3-4785-86ab-6154f14ecfdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3mv36utvm222g", "content": "Google Chrome 153 (153.0.8010.36/.37) korrigiert 230 Sicherheitsl\u00fccken - CVE-2026-87491 in der freien Wildbahn", "creation_timestamp": "2026-09-09T09:09:33.663372Z"}, {"uuid": "52affb79-4ed1-40d5-9cfa-cc0d7772079e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37r4imi52v", "content": "Google patched 230 security vulnerabilities in Chrome, including CVE-2026-87491, an actively exploited V8 out-of-bounds bug enabling sandbox escape and arbitrary code execution.\n", "creation_timestamp": "2026-09-09T09:25:44.769466Z"}, {"uuid": "bdd5f06d-96f4-4bf3-919a-f019978959a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv3bdulshr2g", "content": "Chrome 153 stable patches 230 vulnerabilities, including exploited zero-day CVE-2026-87491, and addresses multiple critical and high-severity issues across V8, WebGL, and Cast.\n", "creation_timestamp": "2026-09-09T09:53:45.364173Z"}, {"uuid": "dd7b28e8-635f-41d9-8673-95e5ba853dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354", "content": "Google heeft een zeroday-kwetsbaarheid verholpen in de V8 JavaScript engine van Google Chrome. Google meldt dat de kwetsbaarheid met kenmerk CVE-2026-87491 actief wordt misbruikt. Het betreft een out-of-bounds write in de V8-engine van Google Chrome, die voorkomt in versies v\u00f3\u00f3r 153.0.8010.36. Een kwaadwillende kan een speciaal vervaardigde HTML-pagina gebruiken om de kwetsbaarheid te activeren en binnen de sandbox willekeurige code uit te voeren. De kwetsbaarheid wordt veroorzaakt door onjuiste bounds checking in het geheugenbeheer van V8, wat kan leiden tot geheugenbeschadiging. Succesvol misbruik kan daarnaast leiden tot toegang tot gegevens buiten de toegewezen geheugenbuffer, waardoor gevoelige informatie kan worden buitgemaakt of de browser kan crashen.", "creation_timestamp": "2026-09-09T10:02:57.527872Z"}, {"uuid": "9ae8b418-2f86-41d6-8ca7-e3a098555f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv3flromy327", "content": "Update Chrome now: CVE-2026-87491, a V8 out-of-bounds write, is exploited in the wild. Patch to 153.0.8010.36/.37 (Windows/macOS) or .36 (Linux) and relaunch. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "creation_timestamp": "2026-09-09T11:09:45.831424Z"}, {"uuid": "8ac38269-5743-4207-80d3-e8ce6d3f1db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv3fn3eyin2e", "content": "Chrome V8\u306e\u8106\u5f31\u6027(CVE-2026-87491)\u304c\u5b9f\u4e16\u754c\u3067\u60aa\u7528\u3055\u308c\u3001\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u5185\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3002Google\u306f\u4fee\u6b63\u6e08\u307f\u3002", "creation_timestamp": "2026-09-09T11:10:29.372970Z"}, {"uuid": "8556fb80-6e60-41c2-969b-9ce3b125188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-zero-day-kwetsbaarheid-in-google-chrome-v8-update-nu", "content": "", "creation_timestamp": "2026-09-09T12:15:13.617229Z"}, {"uuid": "686acb30-342a-4d96-8657-0147aa947e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://t.me/HackerNewscyber/3431", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-09T12:00:04.406970Z"}, {"uuid": "b8498a27-6cf6-4547-bfec-ac13cfb527a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://t.me/thehackernews/10010", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "creation_timestamp": "2026-09-09T12:00:04.495950Z"}, {"uuid": "e9a24857-f6cd-4ee3-89ed-67db5f847c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117241150833718533", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "creation_timestamp": "2026-09-09T12:46:30.428369Z"}, {"uuid": "9b487392-3741-4c7b-9ba5-724145886a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3kyzdopk2j", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. thehackernews.com/2026/09/chro...", "creation_timestamp": "2026-09-09T12:46:39.368472Z"}, {"uuid": "adb57b4d-93ea-47d2-b9af-816d8e9f906c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "content": "Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild.\n\nThe medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine.\n\n\"Out-of-bounds write in V8 in Google Chrome prior to", "creation_timestamp": "2026-09-09T13:03:19.127113Z"}, {"uuid": "622c465f-2770-4a21-af19-b3ee82a71bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv3lxxxwsq25", "content": "Google patched a second actively exploited Chrome zero-day in under a week. CVE-2026-87491 is an out-of-bounds write in V8, and Google says an exploit exists in the wild. Fixed in Chrome 153.0.8010.36, one of 230 security fixes in the release. bleepingcomputer.com/new...", "creation_timestamp": "2026-09-09T13:03:58.150244Z"}, {"uuid": "044bc5e2-bd5a-4c58-91d3-6cda9173ada1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117241101321399242", "content": "Google Chrome #zeroday \n\nGoogle is aware that an exploit for CVE-2026-87491 exists in the wild.\nhttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html\n#Google #Chrome #CVE", "creation_timestamp": "2026-09-09T13:26:00.298616Z"}, {"uuid": "f0d796d7-03ea-4be1-bc12-348817ada0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mv3rrm6dxi26", "content": "Google has released Chrome 153, addressing 230 vulnerabilities, including CVE-2026-87491, a Medium-severity 0-day exploited in the wild. This update includes five Critical vulnerabilities and 43 High-severity bugs across various components.", "creation_timestamp": "2026-09-09T14:47:47.420304Z"}, {"uuid": "04fe8ee7-b5f0-4e26-bbf5-169d95a0cc68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "exploited", "source": "Telegram/Ju-HZh_HlqYldT-jVZcIoKt0JH9EUFfUXnq5AO9xtmN-xA", "content": "", "creation_timestamp": "2026-09-09T16:00:07.057991Z"}, {"uuid": "5f079ddb-8ee6-4521-87d5-327f1906632d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87491", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3wub4ril2h", "content": "\ud83d\udcf0 Google Peringatkan Chrome Zero-Day Baru yang Telah Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/09/google-chrome-zero-day-cve-2026-87491/\n\n#cybersecurity #google #googleChrome #keamanan #keamananSiber #teknologi #vulnerability #zero-day", "creation_timestamp": "2026-09-09T16:18:44.286858Z"}, {"uuid": "8d654f4b-09d8-417b-9f62-1c5e060099c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3zzeqhym2q", "content": "\ud83e\udd16 CVE-2026-87491: out-of-bounds write in Chrome's V8 engine, exploited in the wild, enables code execution inside the sandbox. Patched in Google's latest update \u2014 update now.\n\nhttps://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "creation_timestamp": "2026-09-09T17:15:21.668593Z"}, {"uuid": "bb070f2a-1741-48e1-b760-05b847dc830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv42eybbcs2d", "content": "Just another Tuesday in IT, as Google casually drops Chrome version 153 to fix a staggering 230 security flaws. Desktop browser users are the lucky targets here, suffering through an actively exploited V8 engine out-of-bounds write flaw tracked as CVE-2026-87491. Shielding our wo...\n\nRead full story", "creation_timestamp": "2026-09-09T17:21:46.066074Z"}, {"uuid": "1959de2b-febc-45ab-bca8-0df4a0423539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/volexity.com/post/3mv43lqpz222h", "content": "Earlier this month, Volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). \n\u00a0\n#DFIR #threatintel", "creation_timestamp": "2026-09-09T17:44:03.796149Z"}, {"uuid": "5f1307e1-6262-4bce-9174-d17171324c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://infosec.exchange/users/volexity/statuses/117242320027691801", "content": "Earlier this month, @volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). Volexity observed threat actors it tracks as UTA0560 and JungleBamboo using variations of the same exploits to deliver different malware implants. These implants ranged from a JScript backdoor (GRIMWEDGE) to a fake Google Gemini Chrome extension (LONGTALE).\nRead the full analysis of the exploit chain and post-exploitation tradecraft here: https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/ #DFIR #threatintel", "creation_timestamp": "2026-09-09T17:44:07.726973Z"}, {"uuid": "0afa2b8f-0cb7-409e-be61-779535898aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mv44knqoey2x", "content": "Chrome 153, falla zero-day gi\u00e0 sfruttata: bisogna aggiornare subito\nGoogle corregge CVE-2026-87491 in Chrome 153: lo zero-day colpisce V8 ed \u00e8 gi\u00e0 sfruttato in attacchi real...\nhttps://www.ilsoftware.it/chrome-153-chiude-zero-day-usato-negli-attacchi/", "creation_timestamp": "2026-09-09T18:00:43.771642Z"}, {"uuid": "a53a4595-f8cf-4907-b677-52b03b652396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciad6er2z", "content": "\ud83d\uded1 CVE-2026-87491\nGoogle Chromium V8\nCVSS 8.8 / EPSS 0% / KEV \u2705\nTL;DR: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacke\u2026\nhttps://cvesentinel.com/report/CVE-2026-87491?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-09T19:46:44.787538Z"}, {"uuid": "12ca1094-81a0-4897-8aa1-a7da4056bc18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-904", "content": "", "creation_timestamp": "2026-09-09T20:15:11.493011Z"}, {"uuid": "adc5f166-5663-4791-a047-81fe137b8aec", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a37c372-acc3-4022-9d5f-11bdf31cccbc", "content": "", "creation_timestamp": "2026-09-09T20:00:04.055819Z"}, {"uuid": "022ffa96-6be2-4701-a0e5-58bdbed78e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "creation_timestamp": "2026-09-09T20:03:03.968947Z"}, {"uuid": "443aa634-ca1c-4b99-9a33-4b88b7a801d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "creation_timestamp": "2026-09-09T20:06:36.682612Z"}, {"uuid": "0dc3f8ac-4390-468f-9d6e-687658375a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxv5yxx2i", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87491", "creation_timestamp": "2026-09-09T22:36:34.296587Z"}, {"uuid": "a32bcc8b-2294-4e4c-8930-1dbfe05a0c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:46:09.669606Z"}, {"uuid": "3581d42d-c99c-47d1-8d7b-6d0b2cf0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "exploited", "source": "https://t.me/thehackernews/10010", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "creation_timestamp": "2026-09-10T00:00:41.014465Z"}, {"uuid": "b9b62d42-f6cc-4e4b-8114-0acf56861390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "exploited", "source": "https://t.me/HackerNewscyber/3431", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-10T00:00:41.094403Z"}, {"uuid": "9fc7f650-2a7d-4bfe-8e46-852f797a80cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "exploited", "source": "Telegram/Ju-HZh_HlqYldT-jVZcIoKt0JH9EUFfUXnq5AO9xtmN-xA", "content": "", "creation_timestamp": "2026-09-10T00:00:35.455602Z"}, {"uuid": "4193c463-eb53-4e32-8cb0-b98bf465406e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv4rnv62hr2v", "content": "CVE-2026-87491 is trending. Hype score 9, currently #6 on cvemon.\n\nOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87491", "creation_timestamp": "2026-09-10T00:18:20.739842Z"}, {"uuid": "a6dce7ce-de6e-48b0-bcfd-4f8c668879c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354", "content": "Google heeft een zeroday-kwetsbaarheid verholpen in de V8 JavaScript engine van Google Chrome. Google meldt dat de kwetsbaarheid met kenmerk CVE-2026-87491 actief wordt misbruikt. Het betreft een out-of-bounds write in de V8-engine van Google Chrome, die voorkomt in versies v\u00f3\u00f3r 153.0.8010.36. Een kwaadwillende kan een speciaal vervaardigde HTML-pagina gebruiken om de kwetsbaarheid te activeren en binnen de sandbox willekeurige code uit te voeren. De kwetsbaarheid wordt veroorzaakt door onjuiste bounds checking in het geheugenbeheer van V8, wat kan leiden tot geheugenbeschadiging. Succesvol misbruik kan daarnaast leiden tot toegang tot gegevens buiten de toegewezen geheugenbuffer, waardoor gevoelige informatie kan worden buitgemaakt of de browser kan crashen.", "creation_timestamp": "2026-09-10T01:00:34.278158Z"}, {"uuid": "597b061a-6916-4224-9cc7-e939127cb510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "content": "Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild.\n\nThe medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine.\n\n\"Out-of-bounds write in V8 in Google Chrome prior to", "creation_timestamp": "2026-09-10T01:00:37.082421Z"}, {"uuid": "0ee3f11b-eceb-46f2-9820-2e02423beebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv4xqfb77d2p", "content": "\ud83d\udccc CVE-2026-87491 - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted... https://www.cyberhub.blog/cves/CVE-2026-87491", "creation_timestamp": "2026-09-10T02:07:07.758677Z"}, {"uuid": "64c19f82-8125-4891-8914-569f700efe38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87491", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv4zkjharf2p", "content": "CVE-2026-87491: Chrome V8 Zero-Day Exploited in the Wild Enables Arbitrary Code Execution\n\n", "creation_timestamp": "2026-09-10T02:39:38.237708Z"}]}